Amazon Elastic MapReduce (EMR) now supports S3 Server Side Encryption. This feature is useful for any customers that need to move or process large amounts of sensitive data. S3 Server Side Encryption (S3 SSE) makes it easy to encrypt data stored at rest in S3. With S3 SSE, every S3 object is encrypted with a unique key; the key itself is encrypted with a regularly rotated master key. Decryption happens automatically when data is retrieved. S3DistCp is an EMR feature that uses MapReduce to efficiently move large amounts of data from S3 into HDFS, from HDFS to S3, and between S3 buckets. EMR S3DistCp now supports S3 SSE.